# CVEs published 2006-06-24

20 CVEs were published on June 24, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-3218](https://cve.now/CVE-2006-3218.md): SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2006-3219](https://cve.now/CVE-2006-3219.md): SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2006-3220](https://cve.now/CVE-2006-3220.md): SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2006-3221](https://cve.now/CVE-2006-3221.md): SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via do (no CVSS)
- [CVE-2006-3222](https://cve.now/CVE-2006-3222.md): The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via (no CVSS)
- [CVE-2006-3203](https://cve.now/CVE-2006-3203.md): The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows rem (no CVSS)
- [CVE-2006-3204](https://cve.now/CVE-2006-3204.md): Ultimate PHP Board (UPB) 1.9.6 and earlier uses a cryptographically weak block cipher with a large key collision space, which allows remote (no CVSS)
- [CVE-2006-3205](https://cve.now/CVE-2006-3205.md): Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to gain access via modified user\_env, pass\_env, power\_env, and id\_env par (no CVSS)
- [CVE-2006-3206](https://cve.now/CVE-2006-3206.md): register.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to create arbitrary accounts via the "\[NR\]" sequence in t (no CVSS)
- [CVE-2006-3207](https://cve.now/CVE-2006-3207.md): Directory traversal vulnerability in newpost.php in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote attackers to overwrite arbitrar (no CVSS)
- [CVE-2006-3208](https://cve.now/CVE-2006-3208.md): Direct static code injection vulnerability in Ultimate PHP Board (UPB) 1.9.6 and earlier allows remote authenticated administrators to execu (no CVSS)
- [CVE-2006-3209](https://cve.now/CVE-2006-3209.md): The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which allows local users to gain (no CVSS)
- [CVE-2006-3210](https://cve.now/CVE-2006-3210.md): Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register\_globals is enabled, allows remote attackers to conduct PHP remot (no CVSS)
- [CVE-2006-3211](https://cve.now/CVE-2006-3211.md): Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject Javascript code via a (no CVSS)
- [CVE-2006-3212](https://cve.now/CVE-2006-3212.md): Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML via (no CVSS)
- [CVE-2006-3213](https://cve.now/CVE-2006-3213.md): SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspe (no CVSS)
- [CVE-2006-3214](https://cve.now/CVE-2006-3214.md): Unspecified vulnerability in Hitachi Groupmax Address Server 7 and earlier, and Groupmax Mail Server 7 and earlier allows remote attackers t (no CVSS)
- [CVE-2006-3215](https://cve.now/CVE-2006-3215.md): Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysi (no CVSS)
- [CVE-2006-3216](https://cve.now/CVE-2006-3216.md): Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2006-3217](https://cve.now/CVE-2006-3217.md): JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the username (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-06-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.